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Abstract 

We consider a source-destination pair that can only communicate through an untrusted intermediate 
relay node. The intermediate node is willing to employ a designated relaying scheme to facilitate reliable 
communication between the source and the destination. Yet, the information it relays needs to be kept 
secret from it. In this two-hop communication scenario, where the use of the untrusted relay node is 
essential, we find that a positive secrecy rate is achievable. The center piece of the achievability scheme 
is the help provided by either the destination node with transmission capability, or an external "good 
Samaritan" node. In either case, the helper performs cooperative jamming that confuses the eavesdropping 
relay and disables it from being able to decipher what it is relaying. We next derive an upper bound on 
the secrecy rate for this system. We observe that the gap between the upper bound and the achievable 
rate vanishes as the power of the relay node goes to infinity. Overall, the paper presents a case for 
intentional interference, i.e., cooperative jamming, as an enabler for secure communication. 
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I. Introduction 

Information theoretic security was proposed by Shannon [1]. The idea of measuring secrecy 
using mutual information lends itself naturally to the investigation of how the channel can influ- 
ence secrecy and further to the characterization of the fundamental limit of secure transmission 
rate. Wyner, in [2], defined the wiretap channel, and showed that secure communication from 
a transmitter to a "legitimate" receiver is possible when the signal received by the wiretapper 
(eavesdropper) is degraded with respect to that received by the legitimate receiver. Reference [3] 
identified the secrecy capacity of the general discrete memoryless wiretap channel. The secrecy 
capacity of the Gaussian wiretap channel is found in [4]. 

Recent progress in this area has extended classical information theory channel models to 
include secrecy constraints. Examples are the multiple access channel, the broadcast channel, 
the two-way channel, the three-node relay channel and the two-user interference channel [5]- 
[13]. These studies are beginning to lead to insights for designing secure wireless communication 
systems from the physical layer up. Prominent such examples include using multiple antennas to 
steer the transmitted signal away from an eavesdropper [14]— [16], transmitting with the intention 
of jamming the eavesdropper [8], [10], [17], and taking advantage of variations in channel state 
to provide secrecy [18]-[20]. 

The focus of this work is on a class of relay networks where the source and the destination 
have no direct link and thus can only communicate utilizing an intermediate relay node. This 
models the practical scenario where direct communication between the source and the destination 
is too "expensive" in terms of power consumption: Direct communication may be used to send 
some very low rate control packages, for example to initialize the communication, but it is 
infeasible to sustain a non-trivial reliable communication rate due to the power constraint. 

In such a scenario, the source-destination pair needs the relay to communicate. On the other 
hand, more often than not, this relay node may be "untrusted" [11]. This does not mean the relay 
node is malicious, in fact quite the opposite, it may be part of the network and we will assume 
that it is willing to faithfully carry out the designated relaying scheme. The relay simply has a 
lower security clearance in the network and hence is not trusted with the confidential message it 
is relaying. Equivalently, we can assume the confidential message is one used for identification 
of the source node for authentication, which should never be revealed to a relay node in order 
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not to be vulnerable to an impersonation attack. In all these cases, we must assume there is an 
eavesdropper co-located at the relay node when designing the system. 

The "untrusted" relay model, or the eavesdropper being co-located with the relay node, was 
first studied in [9] for the general relay channel, with a rather pessimistic outlook, finding that 
for the degraded or the reversely degraded relay channel the relay node should not be deployed. 
More optimistic results for the relay channel with a co-located eavesdropper have been identified 
recently in references [11], [21], [22]. Specifically, it has been shown that the cooperation from 
the relay may, in fact, be essential to achieving non-zero secrecy rate [11], [21]. The model is 
later extended to the more symmetric case in [23], [24] where the relay also has a confidential 
message of its own, which must be kept secret from the destination. 

All these models assume that a direct link between the source and the destination is present 
including our previous work [11]. In contrast, when there is no direct link, it is impossible for 
this network to convey a confidential message from the source to the destination while keeping it 
secret from the relay [9]. This is because the destination can only receive signals from the relay 
resulting in a physically degraded relay channel [25]. Therefore, the relay knows everything the 
destination knows regarding the confidential message, and the secrecy capacity is zero. 

The differentiating feature of the model studied in this work from those described above 
including [11] is that the destination has transmission capability. This opens the possibility of 
the destination node to actively participate in ensuring the secrecy of the information it wants 
to obtain. In an effort to address a practical two-hop communication scenario, we shall consider 
each node to be half-duplex, which leads to a two-phase communication model. In addition, 
feedback to the source is not considered in the channel model. Interestingly, in this model, the 
transmission capability of the destination proves to be the enabler of secure communication. 
By recruiting the help of the destination to do "cooperative jamming", positive secrecy rate 
can be achieved that would not have been possible otherwise. We also remark that in case the 
transmission by the destination is not possible or desired, the help from an external cooperative 
jammer will do as well. 

The idea of using a helpful jammer goes back to [17], [26], [27] and has since been used 
in many different models. Besides the multiple access, two-way [8] and relay wiretap channels 
[10], other recent results that use "cooperative jamming" as the part of the achievability scheme 
include [28]-[30]. In [28], a separate jammer is added to the classical Gaussian wiretap channel 
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model. The jamming signal is revealed to the legitimate receiver via a wired link so that an 
advantage over the eavesdropper is gained. Reference [30] does not assume the wired connection, 
and employs a scheme tantamount to the two user multiple access channel with an external 
eavesdropper where one of the users perform cooperative jamming. Reference [29] considers 
the case where both the eavesdropper and the legitimate receiver observes a modulus A channel 
and the destination carries out the jamming. We note that all these works deal with an external 
eavesdropper, in contrast to the focus of this work, which is an untrusted (but legitimate) node 
in the network. 

In general, the optimality of recruiting a helpful jammer remains open as the converse results 
are limited. For the Gaussian case, the main difficulty is to find a upper bound for which the 
optimal input distribution can be found and evaluated. Doing so usually involves the introduction 
of genie information, as in the converse for the Gaussian wiretap channel [4], MIMO wiretap 
channel [14] and MAC wiretap channel [31]. The proofs then typically invoke the entropy power 
inequality, as in [4], or the generalized entropy power inequality, as in [32]. 

In this work, we derive a computable upper bound for the model in consideration by first 
introducing a second eavesdropper, an approach first used for a three-node relay channel in [11]. 
Next, after several steps of genie arguments, the channel is transformed into a wiretap channel 
with a helpful jammer, whose outer bound is then evaluated. The resulting bound is non-trivial in 
the sense that it is strictly tighter than the bound for the same channel without secrecy constraints. 
We also prove that it is tighter than an upper bound derived using the generalized entropy power 
inequality following a similar approach to [32], when the maximum sum received SNR at the 
relay is greater than OdB. We show that the gap between the bound and the achievable rates 
converges to zero when the power of the relay goes to oo. 

The paper is organized as follows. Section [XT] presents the channel model and the two-phase 
protocol that utilizes cooperative jamming. In section Hill we derive the achievable rates. Section 
HV] presents our upper bound and compares with other known upper bounds. Section IVl presents 
the numerical results. Finally, Section [VI] presents the conclusion. 

The following notation is used throughout this work: We use H to denote the entropy, h to 
denote the differential entropy, and Sk to denote any variable that goes to when n goes to oo. 
We define C(x) = \ log 2 (l + x). 
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Fig. 1. Two-hop communication using an untrusted relay 



II. Channel Model 

The system model is shown in Figure CD We assume all nodes are half-duplex and the 
communication alternates between two phases, called phase one and phase two respectively. 
During phase one, shown with solid lines in Figure [Q the source transmits signal Xi . At the 
same time, the destination node transmits jamming signal X 2 in order to confuse the relay node. 
The signal received by the relay in phase one, Y\, is given by 

Y 1 = X 1 +X 2 + Z 1 (1) 

where Z x is a zero mean Gaussian random variable with unit variance. In an effort to reflect on 
the design of a practical system, we assume that the computation of X^ % — 1, 2 does not rely 
on the signals received by node % in the past. 

In phase two, shown with dashed lines, the relay transmits signal X r , which is computed from 
the local randomness at the relay, the signal transmitted and received by the relay in the past. 

The signal received by the destination in phase two is denoted by Y 2 , which is given below: 

Y 2 = X r + Z 2 (2) 

where Z 2 is a zero mean Gaussian random variable with unit variance. 

The channel alternates between these two phases according to a random or deterministic 
schedule, which is generated by a global controller independently from the signals associated 
with the channel model. Hence here the term "schedule" is simply a finite number of channel 
uses which are either marked as phase one or phase two. We use n to denote the number of 
channel uses marked as phase one, and m to denote the number of channel uses marked as phase 
two. It should be noted that in general the n channel uses of phase one are not consecutive. 
Neither are the m channel uses of phase two. We assume the schedule is stable, in the sense 
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that the following limit exists: 



a = lim — - — (3) 



For a given a, we use {T(ct)} to denote a sequence of schedules with increasing number of 
channel uses n + m such that © holds. According to this definition, a becomes the limit of the 
time sharing factor of phase one in the schedule T(a) as n + m — > oo. 

When transmitting signals, the source, the destination, and the relay must satisfy certain power 
constraints. The average power constraints for the source, the jammer and the relay can be 
expressed as follows: 

1 N 

-Y,E[xl k ]<P h 1 = 1,2 (4) 
fc=i 

1 N 

- J> [ X r,k] < Pr (5) 
fc=l 

where 

N = n + m (6) 

is the total number of channel uses. 

For the purpose of completeness, we also introduce the notation P^i = 1,2 to denote the 
average power of node i during phase one. Since node 1 and 2 are only transmitting during 
phase one, P; and P { are related as 

Pi = -, i = l,2 (7) 
a 

Similarly, we use P r to denote the average power of the relay node during phase two. Since the 
relay node only transmits during the second phase, P r is related to P r as follows: 

Pr 

Pr = (8) 

1 — a 

After a number of phases, the destination node (node 2) decodes a message W from the signals 
it transmitted during the periods of phase one and the signals it received during the periods of 
phase two. For reliable communication, W should equal the message W from the source node 
with high probability. Hence we have the following requirement: 

lim Pt(W ^ W) = (9) 

n+m^oo 
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The message W must also be kept secret from the eavesdropper at the relay node, who can 
infer the value of W based on the following knowledges available to it: 

1) The local randomness at the relay, denoted by A. 

2) The n signals the relay transmitted during the periods of phase one, denoted by Y™. 

3) The m signals the relay transmitted during the periods of phase two, denoted by X™. 
The information on W that the eavesdropper can extract from these knowledges should be 
limited. Hence we have the following secrecy constraint. 

lim -J—H(W) = lim — - — H (WlX™, Y7\ A) (10) 

n+m— >oo 77 -j- 777, n+m— >oo 77, -)- 777, 

Since W — {X™, Y"™} — A is a Markov chain, we have 

lim ^—H(W\X?,Yr,A)= lim -^—H (W \X r r n , Y?) (11) 

n+m— >oo 77-1- 777, n+m— *oo 77 -)- 777, 

Therefore, the secrecy constraint can be expressed as 

lim H(W)= lim — - — H (WlX™, Y") (12) 

n+m— >oo 77 -)- 777, n+m^oo 77 _|_ 777 

For a given a, and sequences of schedule {T(a)}, the secrecy rate i? e is defined as 

R e = lim (13) 

n+m^oo 77, -)- 777, 

such that © and (fT2l) are fulfilled. When deriving achievable rate, we will focus on a specific 
sequence of schedules {T(a)}, and maximize the secrecy rate over a. When deriving the upper 
bound, we will consider all possible sequences of {T(a)}. 

Remark 1: Since the signals transmitted by node 1 and 2 do not depend on the signals they 
received in the past, W — > F™ — > X™ is a Markov chain. Therefore: 

lim — —H{W\X^ n ,Y( l )= lim — — H (WlY") (14) 

n+m-^oo n -)- 777, n+m^oo 77-1-777 

Hence, the following secrecy constraint can be used instead: 

lim — - — H(W)= lim — - — H (WlYT 1 ) (15) 

n+m-»oo 77 -)- 777 n+m^oo 77-1-777 

Remark 2: We observe that in the system model shown in Figure \T\ the destination, as the 
sender of the jamming signal during the periods of phase one, has perfect knowledge of this 
signal. This can be viewed as a special case of the model shown in Figure [2l where the destination 
only has a noisy copy of the jamming signal Yj = X 2 + Zj. If the jamming signal is corrupted 
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X r >Y 2 



Phase 2 

Fig. 2. Two-hop network with an external cooperative jammer, CJ 



by a noise sequence Zj that is independent of the noise sequences at the other receivers, then 
the secrecy capacity of the model in Figure [2] can not be larger than the secrecy capacity of 
the model in Figure [Q This is because giving this noise sequence to the destination as genie 
information would simply reveal the jamming signal X 2 to it. Therefore, any upper bound we 
derive for Figure CD is also an upper bound for Figure [2l □ 

Remark 3: An apparent vulnerability of the described two phase protocol is that the destination 
may not be aware that the source has initiated its transmission. In this case, without the protection 
of the jamming signal from the destination, the message from the source would be revealed to 
the relay node and hence compromised. To prevent this from happening, proper initialization of 
the protocol is necessary. □ 

III. Achievable Rate 

In this section, we derive the achievable secrecy rate with the following sequence of deter- 
ministic periodic schedules: 

The channel alternates between n' channel uses for phase one and m' channel uses for phase 
two, where n' and m' are two positive integers. The alternation takes M times. Hence n = n'M 
and m = m'M. For a given a, the sequence of schedules is obtained by letting M, n', m! — > oo 
and 

Ti! 

lim = a (16) 

n',m'^oo m + n 

With this sequence of schedules, we have the following theorem: 



Theorem 1: The following secrecy rate is achievable for the model in Figured! 



< R < max a 

0<P[<Pi/a,0<a<l 



c(*)-c( P[ 



(17) 



where o\ is the variance of the Gaussian quantization noise determined by: 

aC {^^) =(l-«)C(^r) (18) 

where P 2 is defined in ©, P r is defined in ([8]). 

Proof: The proof is given in Appendix |Al ■ 
Remark 4: It can be seen from (flTl) that, for any fixed time sharing factor a the relay should 
always transmit at maximum power P r . However, the optimal transmission power of the source 
may be less than P\. This can be seen as follows: For a given jamming power P 2 , the achievable 
rate is not a monotonically increasing function of P[. This is because, if P[ — > or P[ — > oo, 
R e — > 0, indicating that even if the source power budget is oo, the optimal transmission power 
is actually finite. Let this value be P*. P x * may or may not fall into the interval [0, Pi], which 
is the range of power consumption allowed for phase one. If it does, then the source should 
transmit with power Pj* rather than Pi. If not, then the corresponding optimal value needs to be 
determined. □ 

Remark 5: If the power constraint of the relay P r — > oo, then a 2 c — > 0, a — > 1. The achievable 
rate converges to 

C(Pi)-C(-^) (19) 

1 + -T 2 

□ 



IV. Upper bound 
In this section, we derive an upper bound for the secrecy rate. 

We first need to determine the optimal schedule. It turns out that it is easy to find: We simply 
let the first n channel uses be phase one, and the remaining m channel uses be phase two. The 
optimality of this schedule can be proved as following: 

Suppose a different schedule is used. Since the signals received in the past are not used for 
encoding purposes at node 1 and 2, we can always move the channel uses of phase one to 
the front without affecting the signals transmitted by these two nodes. On the other hand, we 
notice that the relay can only use signals received in the past to compute its transmission signals. 
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Fig. 3. Equivalent Channel Model for Deriving the Upper Bound 
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Fig. 4. Two-eavesdropper channel 



However, during phase one, the relay only receives signals. Since moving phase one ahead only 
means the relay could receive signals sooner, doing so will not limit the capability of the relay 
to calculate its transmitted signals. Consequently, we observe that no matter what schedule is 
used to achieve a secrecy rate, we can always modify this schedule such that all channel uses 
of phase one are ahead of those of phase two and still achieve the same secrecy rate. Hence in 
the following we only consider the optimal schedule. 

We also observe we can transform the channel into the one shown in Figure [31 The jammer 
and the receiver are now drawn separately, since the jammer does not use the signal received in 
the past to compute the jamming signal. Note that Figure [3] is similar to Figure [[2] used in the 
achievability proof except that the dimension of the signals is changed from m',n' to m, n. 



1 1 



Node 2 
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Eavesdropper 
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Fig. 5. Channel model after transformation 



We next leverage a technique first used in [11], [22] to derive the upper bound. Specifically, 
the upper bound is obtained via the following transformations: 

1) First, we add a second eavesdropper to the channel, as shown by Figure HI Its received 
signal is denoted by Y e and over n channel uses F e n is given by: 

Y e n = X? + X 2 n + Z n e (20) 

Here is a Gaussian noise with the same distribution as Z". Z™ can be arbitrarily 
correlated with Z™. Since 

Y? = XI + X% + Zl (21) 

We have 

Pr(W, F e n ) = Pr(W, F") (22) 

Therefore 

H (W\Y?) = H (W\Y?) (23) 

From (fT5l) , this means 

lim — - — = lim — l —H(W\Y?) (24) 

n+m-+oo ffi -\- fi n+m—>co f(l + 71 

Hence the message is kept secret from the second eavesdropper. This means, for a given 
coding scheme that achieves secrecy rate in Figure [3] the same secrecy rate is achievable 
with the introduction of this additional eavesdropper. 

2) Next, we remove the first eavesdropper at the relay. Doing so will not decrease secrecy 
rate either, since we have one less secrecy constraint. 
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From (1241) . the secrecy rate can be upper bounded via H (W\Y™). To do that, we provide the 
signal X™ to the destination by a genie. Similarly, the signal Xl^ is revealed to both the relay 



and the destination. H{W\Y™) is then bounded by: 

H(W\Y?) 

<H (W\XP) - H {W\X™Y™X%) + ne (25) 

=H (W\Y?) - H {W\X™X%) + ne (26) 

<H {W\Y e n ) - H (W\Y?X?X$) + ne (27) 

=H (W\Y e n ) - H (W\Y?X$) + ne (28) 

=H (W\Y e n ) - H (W\X? + Zf) + ne (29) 

<H {W\Y e n ) - H (W\Y e n , XI + ZD + ne (30) 



The genie information X™ causes the signal F 2 m to be useless to the relay, as shown by (1231) - 
d26l) . (|28T) is due to the fact that once the signal received by the relay Y™ is given, the signal 
transmitted by the relay X™, which is computed from Y™, is independent from the jamming 
signal XV; and the confidential message W. Finally, revealing the genie information X% to 
the relay and the destination essentially removes the influence of the jamming signal from the 
relay link, as shown by (l28l)-d30l). These are essentially a consequence of the link noises being 
independent. The resulting channel is equivalent to the one shown in Figure [5l and can be viewed 
as a special case of the channel in [8], [33]. Similar techniques to those in [31], [33] can be 
used here to bound the secrecy rate. Let Y™ = Xf + Z™. Then d30l) becomes: 



H(W\Y e n ) - H (W\ Y e n Y r n ) (3 1 ) 

=1 (W;Y r n \Y e n ) (32) 

<l(WXfrY?\Y?) (33) 

=1 (X?;Y?\Y?) (34) 

=h (Y r n \Y e n ) - h {Z?\X$ + Z^) (35) 

<h (Y r n \Y e n ) - h {Zl\Xl + Z n e , X%) (36) 

=h (Y r n | Y e n ) -h{Z?\ Z n e ) (37) 



13 



Here (1341 ) follows from the fact that X™ determines W. The first term in (1371 ) is maximized 
when X™ and XV; are i.i.d. Gaussian sequences [14]. Let the variance of each component of X" 
be Pi = Pi/ a, i — 1, 2. Let p be the correlation factor between Z 1 and Z e . Then (137] ) is equal to 

n (P 1 + l)(P l + P 2 + l)-(Pi + p) 2 

2 bg2 ( Pl + P 2 + i) (i _ ,2) ( 38 ) 



It can be verified that, for any fixed p, equation (1371) is an increasing function of Pi and P 2 . 
Therefore, the upper bound is maximized with maximum average power. Equation (1381) can then 
be tightened by minimizing it over p. The optimal p is given below: 

2Pi + PiP 2 + P 2 - VA 



2P 

where 



(39) 



A = 4P 2 P? + 4P 2 Pi + Pl?l + 2P 2 2 P! + P| (40) 

As a result, we have the following theorem: 

Theorem 2: The secrecy rate of the channel in Figure [T2] is upper bounded by 

fa, (Pi + 1) (Pi + P 2 + 1) - (Pi + pf X1 ,„ tn ,\ 
ma* mm |-log 2 \ ^ + - + 1} J _ ^ ^ , (1 - a)C(P r ) J (41) 

where p is given by ( 1391 . Pi = P\/a, P 2 = P 2 /a, and P r = P r /(1 — «) are the average power 
constraints of node 1, 2 and the relay for the time sharing factor a. 

Remark 6: If we further fix P 2 , and let P r ,Pi — > oo, then a — ► 1. p converges to p given 
by: 



p = 1 + P 2 /2 - JP 2 + P|/4 (42) 



The difference of the upper bound and the achievable rate converges to 

/ P 2 + (p-r 2 
1-p 



C ( ^^-^ - C (P 2 ) (43) 



We observe that the difference is only a function of P 2 . By comparison, the gap between the 
achievable rate and the trivial upper bound C{P\) is C(j/^p-), which is unbounded. □ 

Remark 7: If we instead fix P 2 = (5 Pi, and let P r — > oo, then a —> 1. The achievable rate 
converges to (|T9b . In this case, if we further let Pi — > cxo, the upper bound given by (HTI) 
converges to 

C(Px) - C(l//3) (44) 
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Comparing it with ([191) , we observe the difference of the upper bound and the achievable rate 
converges to 0. Hence, in this case, our upper bound is asymptotically tight. □ 

Remark 8: The first term in the bound (I4TT) is strictly smaller than the trivial bound aC(Pi) 
obtained by removing the secrecy constraints. To show that, simply let p = 0. (|4T1) becomes 

*^) + flog 2 ^f#^ (45) 
A 1 + (P 2 +i) 

The second term in (l45l) is always negative. □ 

A. Comparison with the bound derived with generalized Entropy Power Inequality 

Recently the generalized entropy power inequality [34] was used to derive a computable upper 
bound for the Gaussian multiple access channel with secrecy constraints [32]. Here the same 
technique is applicable and another computable upper bound for the model in Figure Q] can 
be derived. It is of interest to know which bound is tighter. Next, we prove that as long as 
Pi + P 2 > 1, this upper bound is always looser than the bound given by (I38l)-(l39l). 

First, we briefly describe the derivation of the bound based on the approach in [32]: 



H (W\Y?) 

= H (W\Y?) - H (W\Y?X2) + ne (46) 

=I(W;X2\Y?)+ne (47) 

<I (WX?; X%\Y?) + ne (48) 

=I{X?-X%\Y?)+ne (49) 
Here step (a) follows from Fano's inequality. (|49|) can be written as: 

/ (Xf; Y?\X$) + / (Xf; X 2 ") - I (Xf; Y?) + ne (50) 

( = } J (Xf; Y?\X») - / (X- y™) + ne (51) 

=h (X™ + Z?) + h (X 2 n + ZD - h {ZD - h (X[ l + X 2 " + ZD + ne (52) 

Step (b) follows from Xj^X^ being independent. 

Next, like [32, (76)], we invoke the inequality from [34] and obtain 

2 i h (x?+x S+ zD > 2 " 1 1 lJ + 2 " 12 lJ (53) 

2 
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Hence (1521) can be upper bounded with 

h (Jt? + Z") + h (X™ + Z") - | log 2 ( 2 M X " +Z ") + 2 ^( x ?+^)) + | log 2 (2) (54) 

This expression is maximized when X™, are chosen to be i.i.d. Gaussian sequences. Dividing 
by the total number of channel uses n + m, the final expression of the upper bound is given by 

-■° fe f 2(P ' + 1)(f2 + 1) ) (55) 
2 B2 \ P 1 + P 2 + 2 



Remark 9: Note that (1551) is also tighter than the bound aC(P\) when P 1 > P 2 . Hence it is 
a nontrivial bound when Pi > P 2 . □ 

Remark 10: When P r —> oo, then a — > 1, P; — > Pi, z = 1,2. Comparing (O with d55J, the 
gap between the achievable rates and the bound given by (1551) is 



M 1 + ^pT^) 

which is smaller than 0.5 bit/channel use. □ 

We next show that for any given a, if P\ + P 2 > 1, (1551) is always bigger than the first term in 
(|4TI) . We omit the time sharing factor a in the front since they are present in both expressions. 
Then we pick p such that 

, Pi + P 2 + 2 
1 -"= 2(P 1 + P 2 + 1 ) (5?) 

Note that this is a valid choice for p since the right hand side is within the interval (0, 1). Then 

equation ((41) . after canceling a in the front, becomes 



1 2((p 1 + i)(p 1 + p 2 + i)-(p 1 + P y 

- logo — ^ (58) 

2 &2 Px + P 2 + 2 V ' 



Hence we only need to verify that (1551) is greater than (1581) when P x + P 2 > 1. This is equivalent 
to verifying 



(Pi + 1) (P 2 + 1) > (Pi + 1) (Pi + P 2 + 1) - (Pi + pY (59) 

Or (2p — 1) Pi + p 2 > 0. A sufficient condition for this to hold is to require 2p — 1 > 0. Substitute 
(1571) into this requirement we get Pi + P 2 > 1. 

Remark 11: Since the gap between the achievable rates and the bound given by (1551) is 
bounded by 0.5 bit/channel use when P r — > oo, the gap between the achievable rates and 
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the bound given by (I4TT) is also bounded by 0.5 bit/channel use when P r — > oo and P 1 + P 2 > 1. 
Note that since when P r — > oo we have a — > 1, the condition P x + P 2 > 1 is equivalent to 

Pi + P 2 > 1. □ 

Remark 12: For the case that P x + P 2 < 1, it is not clear between (1551) and (I4TT) which bound 
is tighter. However, for these cases, the secrecy capacity is so small that the bounds are of no 
consequence. □ 



V. Numerical Results 
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TABLE I 

Scenarios considered in the Numerical Results 



Shown in Table |I] are the six cases of interest, corresponding to different power budgets of the 
relay and the jammer and whether time sharing factor a is fixed. We included the cases with 
fixed time sharing factor because in a real system, for simplicity the time sharing factor may 
not be dynamically adjusted according to power budgets. The numerical result of each case is 
shown in the figures listed in the table. We stress that, though not explicitly considered in the 
numerical results, for the more general case where the cooperative jammer is external, as shown 
in Figure |2l the upper bound still holds, but the gap between the upper bound and achievable 
rates would be wider. 

Figures [6] and [7] demonstrate the asymptotic behavior described in Remark |6] when the power 
of relay goes to oo. Note that in this case the optimal time sharing factor a converges to 1. 
Figures [8] and [9] demonstrate the case where the power the relay is finite, and the time sharing 
factor a is fixed. In all four cases, we observe the upper bound is close to the achievable rate 
when relay's power is larger than the power of the source and the jammer. In this region, typically, 
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Fig. 6. Secrecy Rate, P r — > oo, P2 = 0.5Pi, optimal a 



the achievable rate increases linearly with the source SNR. In Figure [6l the gap between the 
upper bound and achievable rate goes to zero as Pi — > oo. In Figure |7J the upper bound almost 
coincides with the achievable rate. The gap, given by (|43l) , equals 9.98 x 10~ 4 bits/channel use. 

Also shown in each figure is the cut-set bound without secrecy constraints. The improvement 
provided by the new bounds depends on the power budget. In general, the improvement is small 
if the power of the jammer is large. Note that since we have normalized all channel gains 
and included them into the power constraint, the power budget difference can be considered a 
consequence of the difference in link gains. 

Figure [9] also illustrates the power control problem described in Remark 0] Without power 
control at the source node, the achievable rate will eventually decrease to zero. Note that this 
behavior crystallizes only when the relay's power is limited. 

Finally, in Figure [10] and Figure [EH we compare the achievable rates and the upper bound 
when each are maximized over the time sharing factor a. The gap between the upper bound 
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Fig. 7. Secrecy Rate, P r — > oo, P2 = 30dB, optimal a 



and the achievable rate is now wider because the second term in the upper bound (HTI) is the 
same as the upper bound without secrecy constraint. The role played by the second term (HTI) 
becomes significant when the bound is optimized over the time sharing factor, which as pointed 
out in [35], has a tendency to balance the two terms in the bound (HTI) . However, as shown 
in these figures, compared to the upper bound without secrecy constraints, the new bound still 
offers significant improvement. 

VI. Conclusion 

In this paper, we have considered a relay network without a direct link, where relaying is 
essential for the source and the destination to communicate despite the fact that the relay node 
is untrusted. Imposing secrecy constraints at the relay node, contrary to the previous work, we 
have shown that a nonzero secrecy rate is indeed achievable. This is accomplished by enlisting 
the help of the destination (or another dedicated node) who transmits to jam the relay, and uses 
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4.5 




P/dB) 



Fig. 8. Secrecy Rate, P r = 30dB, P 2 = 0.5Pi, a = 0.5 

the jamming signal as side information. We have derived an upper bound for the secrecy rate 
with the assumption that no feedback is used for encoding at the source or destination. The new 
upper bound is strictly tighter than the upper bound without secrecy constraints. We have also 
proved that it is tighter than an upper bound derived from generalized entropy power inequality 
when the maximum sum received SNR at the relay is greater than OdB. The gap between the 
bound and the achievable rates converges to when the power of the transmitter, the relay and 
the jammer goes to oo. Numerical results show that our upper bound is in general close to the 
achievable rate, and is indistinguishable from it for a fixed time sharing factor with a relay whose 
power is in abundance. 

In this work, we considered the case where the source or the jammer does not make use of the 
relay transmission for encoding purposes. An upper bound for the secrecy rate when feedback 
is used is recently found in [36]. A gap exists between the upper bound and the achievable rate 
in [36], which is bounded by 0.5bit per channel use but does not vanish when the power of the 
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Fig. 9. Secrecy Rate, P r = 30dB, P 2 = 40dB, a = 0.5 



transmitter, the relay and the jammer goes to oo. By comparison, the bound presented in this 
work is asymptotically tighter in this case. 

We conclude by reiterating that our findings in this paper presents cooperative jamming as an 
enabler for secrecy from an internal eavesdropper, and motivates further investigation of such 
cooperation ideas in more general settings including those in larger networks. We also comment 
whether and when cooperative jamming actually yields the secrecy capacity (region) for various 
multiuser channels remain open problems in information theory. 

Appendix A 
Proof of Theorem Q] 

We first introduce several supporting results used in proving Theorem CD 
In reference [11], [21], we presented the following achievable secrecy rate for a general relay 
channel: 
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Fig. 10. Secrecy Rate, P r = 40dB, P 2 = 0.25Pi, optimized over a 



Theorem 3: Consider a relay network with conditional distribution p(Y, Y r \X, X r ), with X, 
X r being the input from the source and the relay respectively, and Y r ,Y being the signals received 
by the relay and the destination respectively. For the distribution 

p(X)p(X r )p(Y, Y r \X, X r )p(Y r \Y r , X r ) (60) 
the following range of rates R is achievable. 

< R < [I (X; YY r \X r ) - I (X; Y T \X r )} + (61) 

with 

I(X r ; Y) > I(Y r ; Y r \YX r ) (62) 



Theorem [3] follows from the achievable equivocation region given in [11, Theorem 1] by simply 
considering rates R that equal the equivocation rate R e . The proof of Theorem [3] is given in 
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Fig. 11. Secrecy Rate, P r — 40dB, P2 = 30dB, optimized over a, power control at the source node enabled 



[11]. The outline of the achievable scheme is as follows: The relay does compress-and-forward 
as described in [25]. Therefore, as in [25], X r is independent from X in the input distribution 
expression (l60l) . The same decoder in [25] is used at the destination. The same codebook as 
[25] is used at the source node. However, instead of mapping the message to the codeword 
deterministically as in [25], a stochastic encoder is used at the source node. In this encoder, the 
codewords are randomly binned into several bins. The size of each bin is 2 NI ^ x ' Yr ^ Xr ^ where 
N is the total number of channel uses. The message W determines which bin to use by the 
encoder. The actual transmitted codeword is then randomly chosen from the bin according to a 
uniform distribution. This randomness serves to confuse the eavesdropper at the relay node at 
the cost of the rate as shown by the term —I (X; Y r \X r ) in (l6"TT) . 

We next extend this result by considering a relay channel with a jammer defined by 

p(Y r ,Y\X,X 2 ,X r ) (63) 
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Fig. 12. Equivalent Channel Model 



X 2 " 



where X 2 is the signal transmitted by the jammer and the notation Y,Y r , X, X 2 follows the 
definition above. Then, if the jammer transmits an i.i.d. signal according to distribution p(X 2 ) 
and p(X, X 2 ,X r ) = p(X)p(X 2 )p(X r ), the induced channel p(Y r ,Y\X, X r ) is given below 

p (Y r , Y\X, X r ) = $>(X 2 ) P {Y r , Y\X, X 2 , X r ) (64) 
x 2 

and it is also a memory less relay channel. Hence, we can use Theorem [3] and obtain the following 
corollary: 

Corollary 1: The following secrecy rate is achievable: 

< R < max 

p(X)p(X2)p(X r )p(Y,Yr\XX2Xr)p(Y r \Y r Xr) 



I (X; YY r \X r ) - I (X; Y r \X r ) (65) 



with 

I(X r ; Y) > I(Y r ; Y r \YX r ) (66) 



We next reformulate our channel in figure Q] in a way such that Corollary Q] can be applied. 
This is shown in Figure d2l Here we can draw the jammer and the receiver separately, since the 
jammer does not use the signal received in the past to compute the jamming signal. The m! and 
n' are the parameters of the schedule described in Section [Till. We then observe Figure [[2] can 
be viewed as a three node relay network with a jammer, defined as follows: 

p(Y,Y r |X,X 2 ,X r ) (67) 
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where 

Y={Y 2 m \X%'} (68) 
Y r = Y 1 n ', X = X? (69) 
X r = Xf, X 2 = X 2 n ' (70) 
The input distributions to this vector input channel are chosen as 

PCX?', X™', X™') = p(Xf)p(X 2 "')p(Xr') (VI) 

where p{X? ), p(X 2 n ) and p(X r m ) are given below: 

1) Let X" ~ jV(0, P/I n / Xn /), where P[ is the average power consumption of node 1 during 
the periods of phase one. Hence < P[ < Pi. 

2) Let the auxiliary random variable in compress-and-forward Y r be Y"™'. Let F"' = Y™' +Zq , 
where ~ 7V(0, a c 2 I n / xn /). 

3) Let X? ~ JV(0, P r I m < xm <) and X 2 "' ~ jV(0, P 2 W). 
where I n ' X n' denotes an n' x n' identity matrix. With l)-3), we have 

/(X;YY r |X r ) (72) 

=/ (X? ; Y™'X2'Y?'\Xf) (73) 

=/ (X?'; r^'f^lX^'X™') + / (xf; X 2 n '|X T m ') (74) 

From (ED, I (xf jX^X™') = 0. Therefore (JTU) equals 

J (Xj 1 ' ; Y™'Yi' |X r m 'X 2 n ') (75) 



=/ (X? ; Y? \X™ Y 2 m X 2 n J + I (X? ; Y 2 m |X r m X 2 n J (76) 

=/ (Xf; Y™' |X r m 'y 2 m 'X 2 n ') + J (X™' ; Z 2 m ' |X r m 'X 2 n ') (77) 

=/ (Xf ; Y7/' |X r m ' Y 2 m 'X^') (78) 

781) equals: 

/ (xr' ; Y?' + Z"'|X r m V 2 m 'X 2 n ') (79) 

=/ W ; X? + X 2 n ' + Zf + | X r m ' , Xf + Z 2 m ' , X 2 n ' ) (80) 

=/ (X™' ; X™' + X 2 n ' + + z£ | X 2 ra ' ) (81) 
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and 



and 



and 



-J(X?';X? + Z? + Z$) (82) 
1 + ai 



--n'C [ -r-^ (83) 



J(X;Y r |X r ) (84) 

--l(X?';Y?'\Xf) (85) 

=/ (X? ; Xi + X 2 n ' + 2^ \Xf) (86) 

=/ (X? ; X™' + X™' + Z™' ) (87) 

/(X r ;Y) (89) 

=l(X r m ';Y 2 m ',X 2 re ') (90) 



=I(X™;Y 2 m ) (91) 

=m'C (P r ) (92) 

/(Y r ;Y r |Y,X r ) (93) 

=J (If; Y™' \Y™' X? Xf) (94) 

=J + Z n Q ■ Y?' \X%'X™'Z™') (95) 

--I{X? + X™' + Zi + Zg'; Xf' + X%' + Z"'|X 2 n ', X r m ') (96) 

^(X™' + Y 2 n ' + Z[ 1 ' + Z$ ; Xf' + X 2 n ' + Z r / \Xf) (97) 

=/ (xf + Z?' + 23' ; X™' + Z?') (98) 



="' c (^) < 99) 

In (|75]) dEB dHTJ (EB (|97]» (l9~8i we use CZB repeatedly, which says that with compress-and- 
forward, the input distribution are chosen such that X"',X 2 ',X r m ' are independent. 
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Substituting the values of I (X; YY r |X r ), J(X;Y r |X r ), J(X r ;Y) and / (Y r ; Y r |Y, X r ) into 
Corollary \T\ dividing both sides by ml + n' , and taking the limit ml + n' — ► oo, we proved the 
theorem. 
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